ms12-048

MS12-048 is a Microsoft security bulletin from July 2012 addressing a vulnerability in the Windows Shell that could allow remote code execution. The flaw, rated Important, is triggered when a user opens a file or directory with a specially crafted name. Successful exploitation could give an attacker the same user rights as the current user, with less impact on accounts with limited privileges. The security update resolves this privately reported vulnerability and is applicable to supported versions of Microsoft Windows at the time.